# STATUS.md — COO C2 lane

> Maintained by the COO-line agent (COO command-and-control chat).
> Last updated: 2026-09-09

## Scope (ruled by reachableceo 2026-09-07, corrected same day)

- **This lane:** COO, interfacing with SVP KNEL / SVP TCTC, org buildout
  (this repo), and interfacing to the BOD. **Nothing lower than the SVPs.**
- VP-level execution lives in its own lanes: security chats (SecOps /
  SecEng), SRE chat, OAM chat. This chat routes to them via Redmine; it
  does not do their work.
- **DEFERRED:** TCTC structure — reachableceo rules the week of 2026-09-14.
  Interface to SVP TCTC is in scope now; the division's internals are not.

## Active tickets

| ticket | state | item |
|---|---|---|
| #942 | 🔄 | identity lifecycle: 2FA 32/32 DONE; vptechops admin in all 4 systems; next = SSO first-logins + API keys batch |
| #946 | ⏳ | house rules PR #4 open (founder to merge) + release house-rules-v2026.09.0 |
| #826 | ✅ | all COO-chat perf asks done (gitea grant, org row, vpperf 2FA, knelperf project 94, Discourse Performance cat 77) |
| #940 | ⏳ | org-buildout moved to TSYSGroupCorporate; pushes work via vptechops |
| #944 | ✅ | SSH approval recorded (2026-09-09, app containers only) |

## Inbox

- Wazuh `--change-all` rotation: QUEUED — needs GLPI CR first (house rule);
  GLPI REST token auth debug half-done (apiclients + api_token/personal_token
  set for vptechops id 9, both still 401 — GLPI 11 token auth to dig).
- UI resets for stale pairs (phpipam/technitium/grafana/beszel/rancher):
  queued behind Wazuh in the rotation waves.
- SSO + API keys batch (32 identities × 4 systems): mechanism proven
  (oidc-login script + admin levers); batch run next.
- smcli setfield 400 bug (Vaultwarden "Data missing"): upstream fix pending;
  scripts carry the recreate workaround. Junk `ztest_zz` fields on ~9 items
  to clean when setfield is fixed.